Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier: qy0OHCgx5Fm3/yYACvpEncgYytAUqcnkjL7aNMP2tPE=
Subject key identifier: BC:1F:56:5C:9C:F2:DE:D9:A5:0D:96:7B:5A:70:13:3F:9A:EB:06:FB
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 01A13F70441782505517B49A3DADEE987FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number: 1AC5
Signing time: Thu 15 Oct 2026 12:01:23 +0000
Manifest this update: Thu 15 Oct 2026 12:01:23 +0000
Manifest next update: Fri 16 Oct 2026 12:01:23 +0000
Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: wa7pYcSE/JrYgQBQ7W+oUqf/qRr7xfZvjMsh8vpZWo0=)
2: IMNGeAH2RRBE8orK0TLke0HPxKQ.roa (hash: e4rxqBMgfnAkGyLI8Cggr5KhboGpBtVTFvPT4BNFaIw=)
3: oRUzmPVMVYzpNrzGxH1BooLT378.roa (hash: uCcKGYmN/9GuwRuNNCgcYsC9Ba96kMPVmQDqSWP2004=)
4: w4CVyL2U79HSB7wONrXYugmX-AM.roa (hash: yBF78znISqvhJ/sR7b39y1Qr+HsHjN0eWMU8QBarpaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:44:17:82:50:55:17:b4:9a:3d:ad:ee:98:7f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Oct 15 12:01:23 2026 GMT
Not After : Oct 16 12:01:23 2026 GMT
Subject: CN=bc1f565c9cf2ded9a50d967b5a70133f9aeb06fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:b5:af:56:71:7a:ba:cb:07:c0:41:5e:b6:
5f:ff:41:89:1f:00:cb:1a:1a:dd:ae:e0:22:43:e2:
36:df:75:b3:8d:56:cd:f0:b8:39:88:56:14:91:0a:
81:13:92:a6:98:58:0f:07:9f:9b:96:38:22:41:30:
1a:7c:74:17:92:8f:b1:ff:3a:0d:e6:6b:8a:73:a8:
c0:6f:b1:8d:36:07:8a:68:24:c3:f2:c4:53:82:c5:
ae:f5:b1:27:c2:49:97:f6:de:fe:0a:37:83:22:e1:
ac:ba:51:d4:8a:1e:fc:8c:b1:0f:2d:18:2a:e5:cd:
11:0c:74:db:5f:d9:6f:3f:18:81:d3:18:9d:66:db:
ce:19:9a:69:e9:73:53:64:e9:95:29:92:70:ed:c7:
44:0e:4f:b8:cd:3a:82:0b:02:bc:b6:6d:fa:c7:07:
1e:b1:bd:0a:3e:7a:c4:cb:06:c9:a8:d2:50:fb:5e:
d0:e5:23:8f:9d:1d:22:5e:3c:f5:ce:9c:db:56:fa:
08:f1:9a:23:60:2d:6c:43:1e:b9:3b:64:ae:b5:09:
db:45:6a:d9:d1:7a:5e:c5:2a:89:cd:50:8e:ca:9f:
d0:b1:a7:8d:f3:c2:78:13:e6:4f:6e:f3:de:0d:65:
70:8c:e0:35:95:34:ca:ba:74:4c:6a:e0:69:25:38:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1F:56:5C:9C:F2:DE:D9:A5:0D:96:7B:5A:70:13:3F:9A:EB:06:FB
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cf:79:4c:8c:8a:e4:8c:bd:21:6d:b7:0f:52:4c:64:58:69:
4f:24:ac:7d:bf:79:65:0a:25:20:e9:86:58:8d:88:e7:55:76:
5c:5b:e7:1e:81:57:50:5b:27:f2:25:50:9a:11:f8:d7:df:43:
cc:de:02:af:7a:5b:d5:d0:a9:1e:64:a7:27:43:14:6c:a9:13:
5a:7d:b4:42:a9:c8:34:3e:36:3e:77:4c:63:f7:51:5c:14:a1:
08:0a:b0:db:95:53:c1:18:20:20:7f:4e:2e:42:b9:73:60:e5:
4e:de:c9:8b:1f:74:59:61:07:e4:b1:64:0f:df:f4:16:29:d0:
36:0d:91:c2:c0:a7:46:22:07:29:fe:89:b5:e3:8d:6c:a3:ff:
da:e8:5d:a8:ff:e7:fd:91:81:a2:fc:69:47:4c:20:f4:18:f6:
5b:f7:2e:8c:43:e3:79:5b:3d:5a:97:a4:09:ac:64:9e:71:2a:
28:ba:d0:33:ea:32:58:8a:c5:40:eb:59:2d:d5:66:fc:7e:6d:
f4:ff:37:53:ae:55:b4:7a:0b:89:b8:39:14:4b:cc:fc:a5:1c:
ea:10:83:39:86:a6:c5:58:cf:c5:ed:c7:50:93:0d:5b:ed:0c:
2e:b1:eb:b4:d0:52:8f:47:39:08:80:4b:a8:57:21:ee:90:ae:
01:56:15:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:45:41 2026 by rpki-client